Add ChangeLog entry for verify_result hardening

Signed-off-by: David Horstmann <[email protected]>
2026-08-13 14:47:50 +00:00 · 2026-02-05 14:31:46 +00:00
parent 0ecde06ce9
commit e29d7be48e
1 changed files with 5 additions and 0 deletions
@@ -0,0 +1,5 @@
+Changes
+   * Harden mbedtls_ssl_get_verify_result() against misuse.
+     Return failure if the handshake has not yet been attempted. Previously
+     the result of verification was zero-initialized so the function would
+     return 0 (indicating success).